crude input validation and password check